Progress 漏洞

时间轴

类型

Not Defined35
Network Management Software5
Content Management System5
Messaging Software2
Automation Software1

产品

Progress MOVEit Transfer10
Progress Sitefinity6
Progress Sitefinity CMS5
Progress OpenEdge4
Progress Database4

修正

Official Fix27
Temporary Fix0
Workaround1
Unavailable0
Not Defined20

易受攻击性

High0
Functional0
Proof-of-Concept6
Unproven1
Not Defined41

访问向量

Not Defined0
Physical0
Local7
Adjacent4
Network37

身份验证

Not Defined0
High0
Low14
None34

用户交互

Not Defined0
Required10
None38

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤57
≤610
≤76
≤811
≤98
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤510
≤611
≤75
≤812
≤96
≤102

VulDB

≤10
≤20
≤30
≤47
≤55
≤69
≤76
≤816
≤91
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤64
≤78
≤83
≤93
≤109

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k11
<2k17
<5k20
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k46
<2k1
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (20): 4GL Compiler (1), Database (4), JustAssembly (1), JustDecompile (1), Kendo UI Editor (1), MOVEit Automation (1), MOVEit Transfer (10), Messenger (1), OpenEdge (4), Redirection (1), Sitefinity (6), Sitefinity CMS (5), Telerik UI for ASP.NET AJAX (2), UI for ASP.NET AJAX (2), UI for Silverlight (1), WebSpeed (1), Webspeed (1), Webspeed Messenger (1), WhatsUp Gold (2), Whatsup Gold (3)

已发布BaseTemp漏洞Prod易修正CTICVE
2022-05-123.53.5Progress Whatsup Gold API Transaction 信息公开Network Management SoftwareNot DefinedNot Defined0.00CVE-2022-29845
2022-05-124.34.3Progress Whatsup Gold API Transaction 信息公开Network Management SoftwareNot DefinedNot Defined0.07CVE-2022-29847
2022-05-124.34.3Progress Whatsup Gold 信息公开Network Management SoftwareNot DefinedNot Defined0.03CVE-2022-29846
2022-05-123.53.5Progress WhatsUp Gold API Transaction 信息公开Network Management SoftwareNot DefinedNot Defined0.00CVE-2022-29848
2022-05-027.87.5Progress OpenEdge SUID Binary 权限升级未知Not DefinedOfficial Fix0.07CVE-2022-29849
2021-09-294.34.1Progress WhatsUp Gold Application Endpoint 跨网站脚本Network Management SoftwareNot DefinedOfficial Fix0.06CVE-2021-41318
2021-08-087.37.0Progress MOVEit Transfer SQL注入未知Not DefinedOfficial Fix0.05CVE-2021-38159
2021-08-066.36.0Progress MOVEit Transfer Web Application SQL注入未知Not DefinedOfficial Fix0.06CVE-2021-37614
2021-06-106.36.0Progress MOVEit Transfer MOVEit.DMZ.WebApp SILUtility.vb SQL注入未知Not DefinedOfficial Fix0.05CVE-2021-33894
2021-05-186.36.0Progress MOVEit Transfer Web App SQL注入未知Not DefinedOfficial Fix0.03CVE-2021-31827

38 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 38 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!